CVE-2024-11261 - CVE House
Back to Database
Status published Medium CVE-2024-11261

SourceCodester Student Record Management System Number of Students Menu StudentRecordManagementSystem.cpp memory corruption

Vulnerability Description

A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of the component Number of Students Menu. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11261

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • polaris0x1 (VulDB User)

References

More from SourceCodester

View All →
CVE-2025-9833
SourceCodester Online Farm Management System login.php sql injection
Medium 6.9
CVE-2025-9832
SourceCodester Food Ordering Management System register-router.php sql injection
Medium 6.9
CVE-2025-9790
SourceCodester Hotel Reservation System updateabout.php sql injection
Medium 6.9
CVE-2025-9789
SourceCodester Online Hotel Reservation System edituser.php sql injection
Medium 6.9
CVE-2025-9788
SourceCodester/Campcodes School Log Management System admin_class.php sql injection
Medium 6.9

Affected Vendor

SourceCodester

View all reports →

Affected Software

Student Record Management System
Vulnerable Versions:
1.0

Timeline

Official Publish: November 15th, 2024
Last Modified: November 19th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control